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WATERMARKING OF DIGITAL OBJECT 
FIELD OF THE INVENTION 

authenticating copyright ownership. 

BACKGROUND 
Bec ause of the rapid increase of Clonic " = intherecen. ^ 

,„„,i«roarties Various kinds of data, mdudmg rmhtary 
unintended exposure to other parues. ^ ^ 

^tography^protectmeda.. _^ , inthe past, 
rXriep^^orto.eo^. Uede^onofftdeiit^ 
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copying process, e.g., i„ ^copying or . ^ ^ ^ ^ 

unauthori 2 ed copying of such materia,. Today, many visual , ^ ^ ; 
proprietary works are stored and Emitted digitally . Such ^ ^ ^ 
co P ,ed over and over without signiflcant , oss m ^ ^ ^ ^ ^ ^ ^ 

or^ I a rti s« CW or M rpr„pr i e tar y work , is , atoncethed ^ ldatamtomittt(i 
,f da.asuspec.ed .„ be copies of A, Emitted data are found, «he verification of ' 
whether the suspect data are M pied ftom * originally ^ fa 

dtgttai data of a piece of art work, is usually impossible. 

Gently, digita, watermarking has been devised as a security technique to 
facilitate the identification of Source of digita! materia, f„ r , hc purpose of for 
example, copyright enforcement. The watermark h an identification code that is 
■mbedded in the original digita , dala Md , pK[mb[y ^ ^ ^ 

observer of the artistic work. One example 0 f a scheme for watermarking i„vo,ves 
■nserting an identification string into a digita. audio signa, * subsume the 
.nsignifican, hi. of randomly selected audio samples with the bits of an identification 
code. Another example of watermarking relating to watermarking video digital 

.hat, when modified, requires a p,ura,ity of turther parameters to be modified in order 
.ocorrecUydecodet.evideosigna,. ,» one watermarking technique each copy of an 

o^ct.smarkedwidtanidentifiercode.Morerecently.awatermarkingschemein 
wh,c„ a two-dimensional spread spec™, signal is added to an image has been 
proposed. To verify the watermark in a given image, the origin, image is subtracted 
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signal is computed. ..... 

' Although much advance has been made in —icing d.gt*! data. 

Often U.eorig.na.in.ageUnece.ary.ove^.hepresenceof^w— • _ 

^^-----^■•--•'- ,l -• f -:"*^" ,ta, . 

toototo awo A of teg e r o r s m ane r ^poseacons i de ra Uep robl e n; o nt h 
venficationprocess. Many times the walking scheme U .nvembie, «, « 

lJ fct w— is.^heahie.oco.p^asecondi^eandasec d 
l^suchihai — second^a * iato the second image wouid 

^ It — o f — Further, it 

vva.ermaricandclaim^eresu.tmgproduc.tobehUown.Often.mnnor 

-^'r^t^Z. ■ 

isusedtoptotectseveraiwo^co^se^esectecyo 



3 



WO 99/17537 



PCT/US98/20196 



or contrast change,, and will not ^ ^ ^ ^ 

mechanism of watermarking in one watermarked work is disciosed. 

SUMMARY 

The P-en. invention provides a technique for identifying digita, object using 
a dtgita, watermark. This technique can he easily impiemented using compute* 
The technique inciudes enoypting data deri ved from a s=, of source data on me 
dtgita, object, deriving from me encrypted data a watermark, and incorporating the 
watermark into the source data. P ref e r a bly , me source ^ of ^ ^ ^ ^ 
processed through a hash function to obtain a message digest (M) on the digita! object 
and the message digest (M, is encrypted with a signature encryption key ,o obtain an 
encrypted message digest (S). Further, the enctyption „f ^ message ^ (M) „ 
preferab.y done with a pub.ic key-private key encryption system. Because the 
preferred mode is to process the source data through a One-way hash (unction to 
obtain a message digest, for ciarity and convenience, the se, of data for encryption 
derived from the se, of source d to is termed a "message" or "message digest" herein 
-though they do no, necessarily have to have been mrough a one-way hash fcnction 
The se, of encrypted data is caiied "encrypted message diges," herein f„ r same 
reason. 

The present watermarking technique is versatile and can be advantageously 
employed to watermark a variety of digita! objects, including audio, video, imag e 
multimedia data, and the Uke. Further, the present technique offers high security' 
because, is no, easily foiied by a tt acke re .Fore..mp,e,byaus i „g a ha S h f u„cti„„ i „ 
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backcompute the ong. a key 

^increase sec-ty, in an embodt-nent of ^ ^ 

tobe cop i =dfromanorigina.,e.g.,copyngh«=d,ob J e«)ca n b. 

can be established to a neutral party, such as ^ 
of the object's owner, without retiring the owner to revea. hts pnvate key 

which a portion of the object is cm;. n ctn u- 

ft^nixels into which the watermark is to be 

ve-.ortho^tothevectoro^^ — ^^.^ 
inserted, changes in the brightness or contrast will 

BRIEF DESCRIPTION OF THE DRAWINGS 

• xA*Ato better illustrate the embodiments of the 
The following figures are included to better 

• in these figures, like numerals represent like 

of the present invention. .In these ngut 



technique 
features inthe several views. 
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Figure I is a biock diagram showing w ^ ^ 

technique of the present invention. 

Figure 2 is a biock diagram showing in ^ detai , m rf fte 

watermarking technique of Fig. 1 

Figure 3 shows a flow diagram of an embodiment of a watermarked objec[ 
betag chained from a digital object according t „ m . present mvaitioa 

Figure 4 shows how a suspect object is evaluated ,„ determine whether it is 
derived from a watermarked object, according ,„ an embodiment technique of the 
present invention. 

Figure 5 shows a picture printedfrom a digital image. 
Figure 6 shows a picture printed from a digitai image having a watermark 
incorporated into the digital image of Fig. 5. 

Fig. 7 shows a correlation spread of Fig. 6. 

Fig. 8 shows a cropped and JPEG- compress* watermarked image of H . 5 

showmg the resistance to distortion by compression and cropping. 

Fig. 9 shows a correiadon spread of Fig. 8, sh „„ ing ^ sensWvity rf ^ 

equation for the presence of watermark in the object even when the object has been 

cropped and compressed. 

Fig. ,0 shows a truncated watermarked image of Fig. 5 , showing the Stance 
m to distortion by truncation. 

Fig. II showsacorrelationspreadofFig. ,0, showing the sensitivity of the 
evaiuation forme presence of watermark in the object even when the object has been 

truncated. ' 
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DETAILED DESCRIPTION 



The present invention provides a technique for inserting a digital watermark » 
t0 a digital object and for evaiuating a digita. object for the watermark. An 

w— ^oderive.beoriginaid^.object.omdtew— d, .uiob.ea 

The digital watermark is resistant to cropping, scaling, inadvertent distortions, as well 
^.heinten.ionalremovalorcom.ptionoftt.ewa.ennaritbyananacUer. 

A digital object that can be watermarked with the technique of the present 

^^^^^^^^^^^ , r 

^edintouctileinformationthatcanbesensedb, touch; — 

vlLald^.ochno.ogyas.pixels"). Thus, a digits photo^apb may co„»,n 
hundredsofrowsandcolumnsofpixeU. However, in this disclosure, >*e,s canbe 
*. discrete segments of digital data for other types of digita! information, e.g., those 
m en.ionedin the above. In the case of sound recording, for example, a sound signa, 
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may be sampled by an A/D convener, which would output samples having values 
represent of the characteristics of the spund signal at particuiar time segments 
The technique for obtaining pixels of data on visual images, audio signals, and other 
data streams are well town in me M , ^ convenfcnal [w ^ 

digital objects is applicable. As another example, a digital camera or a computer 
runmng a computer graphics software can be used to generate digital images directly 
Sumlarlv, music can be converted from sound waves to digital data by using A/D 
converters. These digita, objects, as well as other types of digital objects, are 
applicable in the present invention. 

An embodiment of the watermarking technique of the present invention is 
depicted in Fig. A digital object, I(ij), having m rows and „ columns of pixels is 
processed through a hash function 100 (e.g, a one-way hash taction such as the 
MD5 function) to result in a message digest M. The Action of the hash function is 
to take the input data I(ij) and convert mem into a fixed-size suing (hash), and 
preferably a much shorter string for a large object, much as a fingerprint, of the input 
data I (,j). Preferably, the hash is generated in such a way that i, is very difficult to 
generate the original input data from the hash, i.e, the message dittest M This 
difficulty of back calculation is beneficial because if an atacker were ab.e to derive 
4. mput data from the hash, he might be able to remove or change the watermark 
Many hash functions are known in the art and can be applied in the present technique 
One applicaMe oneway hash function (or message digest algorithm) known „ the art 
is the MD5 method. Other exampies of applicable one-way hash functions inCude 
the SNEFRU function, SUA function, and HAVAL taction. (See Schneier B 
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^CW*.*** ™* anions, 1993 , p , 333-346 for a d,s— 
lotions OA,-*^-^.*- 

op e r a KS o I ,an«..e^-a geF .oo bt , n a fe ed- 1 en gttl ha 5 Kva,ue,h. 



h = H(M), 

al „„ rittim can either be a pubUc Xey-private *ey systetn 
LyptioUa— ^ 

; ysical «I f ap ri va t e tey a 1 o n . i s US e df o r — ^Upnva,,^ 

obj ect from the encrypted messa 8 e digest However, if it is necessary to prove 
ow »ersHp ; e.,,«oa.hirdpa rt ysnchasacourtof 1 aw,,o verify the owners 
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signature, the owner would have to reveal his private key. With the private key 
revealed, his other watermarked objects that, are marked with the same or similar 
private key watermark might be compromised since an attacker might be able to gain 
access to his private key to use it to obtain information on the watermarking of the 
other objects. 

A more preferable way would be to use a public key-private key encryption 
system (referred to as the "public key system" hereinafter unless specified otherwise). 
In encryption using the public key system, the user possess a matched pair of keys: a 
private key and a public key. The private key is kept secret and is known only to the 
user whereas the public key can be distributed widely. A message encrypted with 
either key can only be decrypted with the other key. If a user encrypts a message 
with his private key, then the message can only be decrypted with his public key. 
Because only the user has the private key, the encrypted message can be decrypted 
only with his public key. Since the private key is known only to the encryptor, it is 
established that if the encrypted message can be decrypted with the user's public key, 
he must have encrypted the message, i.e., he has "signed" the message with his 
"signature." The strength of the signature is dependent on knowing that the public 
key of the user is genuine. For this reason, public keys are preferably notarized or 
certified by third parties. In this invention, when the public key system is used, the 
private key is used to encrypted the message to create the watermark from the 
original image. When it is necessary to prove ownership of a watermark, the public 
key can be provided, e.g., to a verifying third party, to verify the owner's signature. 
The advantage of using public key encryption in this invention is that since the 

10 
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, thm is necessary to back-calculate from the encrypted M 
t0 obtain the original M. Many ryp ^ 

standard) = r aRIN alaorithm, and DES (data encryption 

pnHT.IG-HELLMAN algorithm, RABIN algonuii 

POHLIG HE ^OWW*"^ **** 

standard) aigon^ -Schte.er.B., * ^ olithms t0 a oigital 

sWlledinAeartwillknowhowtoapplysuchencrypUo g 

However,.! , r „, hcsil e of the data that requires encryption to 

needed. The hash function reduces the svze ot 

pro duce.hewa.enna*. st s , form ed it is proc«sed (block 106) to 

After the encrypted message digest Sis formed,, P 

„ h „v,ect TO i) In «n embodiment, shown in Fig. 2, to derive 
derive the watermarked object Hi J)- ™ 

,.,t m ««we digest Sis modulated, e.g., to 
the watermarked object I'CUl. «* mKSa = e *^ 

1 1 
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modify Che a.pU.udeofd.esi^Uo^^,^^,^,^^^ 
the spectrum (block 108). By this process (plock ,08), a key vector V, represent a 
Physical domain signal, b obtained. Spreading the message digest S over a iarge pan 
• of the spectrum has the advantage of rendering the watermark substantial!, 
imperceptible to the human sense organ for which the object is designed. Further the 
watermark will b. preserved if the data is manipulated by processes such as 
compression or cropping. For example, spreading the message digest S over a 
substantial part of the spectrum would not overly distort a certain small range of 
colors in a visual image or distort a certain small range of audio frequency. Since a 
useful watermark preferably is preserved when undergoing lossy compression or 
cropping, the watermark is placed in the portion of the specfrum in the p^,,, 
significant portion of the spectral frequencies. If such a watermarked object is 
cropped to remove the watermark (e.g., by an attacker), the object would be distorted 
sufficiently mat its quality would be substantially inferior ,„ the original object or the 
watermarked object A person skilled in the art will know what portion of me 
spectrum to modulate for a particular object without undue experimentation. 

From the key vector V, a watermark vector W applicable for inserting into a 
selected portion of the original object is obtained (block 1 10). As will be 
described later, the watermark vector W is dependent on the particular portion of the 
original object I(ij) selected for the msertion of the watermark. After incorporate 
the watermark into the original object I(ij) by combining toe watermark vector V " 
with the seiected portion of toe original object I(ij), the watermarked object rflj) is 
obtained (block 1 12). 
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watermarKin 0 dvi a u 0 audio digital 

objects, tactile digital object, and the like, can 
skffl =d in *=an based on the present disclosure. 

Example . 3 f 0 n 0 ws 

The process is described in general and ulustrated m F,,. 
"Tdi^.ohiectirnage^withnrrowsandncolun.ofp^. 

obtained. Amessa s e dig ^ faction to obtain the message digest M. 

H< to the number of columns of pixels. Alternately, the 
corresponds to the numoe follov/ . ng 

digest S are assigned values of 0. The nrsx 
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contend ,o ,he DC componen, aflbe pixe| , For ^ ^ ^ ^ ^ ^ 
65th bits of U, a bi, is assigned a value of for . ^ rf q ^ ^ ^ 

in U is assigned a 1 for a corresponding bit of 1 in S it u , 

H^auing on or l in S. It is to be understood that the 

modu,a,ion can have o«her optional valuM> as ^ ^ ^ ^ ^ ^ 

resulung wa<ermark would no, over.y dis,ort me objea For ^ § ^ ^ d 
instead of having a vaiue of may be assigned a vaiue of 2; and a bit of , ta „' 
be assigned a vaiue of -, . Furthermore, ^ f|rs , Wts rf „ ^ ^ ^ ^ ^ ^ 
bits than 64. However, a ionger « would require more corner power to indent 
<h= watermark, and a smailer U is more pro mp t to be broken by an attacker. The firs, 
b.ts of „ correspond to the lowerTrequencics, which arethc more co„cep,uaUy 
s.gntfican, frequencies of «he visuai i ra age objee, This is aiso ,rue for audio di»i,a, 
works. However, i, is conceivable that in other works where the perceptually = 
s.gntfican, bits are in the higher frequencies, the higher frequency bi<s ofu wii, be 
moduia,ed. Furthermore, the firs, bi«s of u need not be based on the firs, bi B of S 
bu, optionally can be based on some ota bhs as iong as ,hey are consistent For ' 
exampie, fte firs, bits of U can be based on the las, bits, the midd,e bits, or aitemate 
bi*, or fte iike of S. The firs, bi, in S (corresponding ,o fte DC component) havin. a 
value of 0 makes the watermark resist to changes in brigtaness or confras, " 
W A reverse Fourier transform of V is performed ,„ obfcin a key vector V I, 
, ,o be unders,ood ma, other types of Worms, e.g., reverse Discrete Cosine 
Transform (DCT), can be used to transform U from the frequency domain to a 
Physical domain, e.g. time domain (for examp.e, for audio and „<her time varian, 
,>a,s, ofspatia, domain (for, examp,e, for images, video, or other spa.ia.ly varying 
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10 



15 



an 



signals). A person ^closure to derive a 

transforms to obtain the k* -ctor V based.on the present d,sc.osu 

key vector V «ou.d have a dependency on ft. vector A. u, P 

• mws of the object, preferably the key 
co^cpo^onomee^.n.e-" ^ 

^rrnr V is orthogonalized with respect to the reierenc 



where P - JpTF 
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A istheunitvectoralongA. The watermark vector W represents th e frequency ^ 
magnitude data of the digital watermark that is to be incorporated into the originai 
object I(i j). 

(6) The watermark vector W is incorporated into the original object I(i j) 
preferably, by inserting into the portion of the I(iJ) f rom which the reference vector 
A has been derived. A common method of inserting the watermark vector W is by 
adding a small scaled version of W back to each of the b rows selected for the 

r ^ CrenCe VCCt0r A ear '* er * ^is method of obtaining the watermarked elements 
r(i,j) in the object can be represented by the followin 



equation: 



I'(id)= I(iJ) + a(ij)W(ij) Eq2 

In Eq. 2 a is a proportional constant, which may vary depending on the positions of i 
or j if preferred. 

In a preferred embodiment, 

I(U)=ccos(27ci/b) £q 3 

Typically, , is chosen such that toe watermark signal is roughly - 40dB PSNR (peak 
signal to noise ratio). Other methods of inserting watermarks can also be used. For 
example, multiple scaling factors a that depend on other factors can be used 
Additional^rmarks can be added to other locations of the digital object as desired 
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f.Heori^ldi^l object are replaced with the brov, of watermarked 
te „ roW s of .he orvnal ^ Mme mmber ot rows m 

nixels Thus the watermarked object 1 0J> ^ n 

• • „ / m h\ rows of elements remain 
^ elements whereas the remaining (m-b) rows or 

or j in Eqs. 2 to ur varies as a 

Jthematically simpler than a mo dimensional ^llmensional 

^^epresentdisCosure. , g derivtd (e ., copied) from 

Given a suspect image 1 OJj suipc^ 

' W ^suspectimagecanbeevaiuatedbymefoUowmg 
the watermarked object 1 WJ, v 

I dft eav t ra g erowv=c.or A .In fll isme«hod,eachb,oc,ofbco„t,.o U sro W sm 



WO 99/17537 



PCT/US98/20196 



•he suspect image fo r the watermark is uxalMy ^ ^ ^ ^ ^ 

b congou, rows can be evaiuated, then ,he b contiguous rows starting fan the 
second row to the (, +b )th row , Aa> At AM row „ ^ (2+b)ft ^ ^ ^ ^ 

(A) In each block to be evaluated, the b rows are averaged to obtain a 

reference vector A". 

(B) The vector A" is orthogonalized with respect to A to obtain a suspect 
watermark vectorX The mathematics of orthogonaiizing A» is simiiar to that of 
orthogonahzing the key vector V in Eq. 1. 

(C) The rciative closeness of X to W is computed, e.g, by caicuiating the 
correction between the yv and X. the equation for caicuiating the correiation 
between X and W a is as follows: 



Correlation = - W * X c A 

W){X. X) Eq - 4 



(D) Step (C) is repeated to compute the relative closeness of X to W for ail the 
blocks of contiguous b rows. 17* maximum of the relative closeness over all the 
blocks of b rows is then taken. If this relative closeness is above a predetermined 
threshold value, then the suspect image is deemed to contain the watermark 
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(E) If che suspect image POJ) is cropped or a h ° riz0Mal ^ " y 

t0 get the best re.at.ve closeness, i.,, to arrive at the maximum correction of the 
^tothesuspectobiect. Further, a search can be conoucted for reflections of 

the diotal object about the axes. 

■ "(F) Synthesize a number of random candidate watermark vectors (e.g., one 
h„ndredwa,ermar k s) W i mfll e S amespectra.propertiesasV.Compu«ethe 

nation of each of these candidate vectors with the suspect digita! object r 0* at 
^ location, scaie, and crop factors at which the correlation of W was maximrzed 
(0) Compare the correiation obtained from the originai watermark against the 

then it is likely the suspect object r<<J> contains the watermark key vector V. In 
om erwords,uisUke,ythat suspect object I"(U) has the watermark of the or,g,nal 
object ICij), and therefore is likely to have been derived from tt. 

The above deais win, detecting whether a suspect object is derived from an 
origina, object. In me case that the ownership of a digitai object J(ij), e.g., a d,g,tal 
imae e, is in dispute, the ownership can be estabUshed via determining the presence of 
a^errnarkbyaneu^U.irdpa^suchasajudge.Apersonciaimingownersh.po 

and the signature S of the hash of tha, origina, digital object, and his pubhc key for 

aecryption. He would farther declare the location in the digital object m *• 
watermarkcanbefoundandthesca.ingandcroppingfactorsof.Mwiu.respecttoh.s 

original object I(ij). The judge can verify using the following process. 
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(A) Compute a message digest of the bits in I(i j). Decrypt S with the public key 
presented by the claimant. The bit strings.for the message digest computed and the 
deaypted S should be the same if the claimant is the owner of Jftj). Otherwise, reject 
the claimant's claim of ownership. 

(B) Construct the watermark vector V from the signature S. At the specified 
location of the object J(iJ) compute the correlation of the watermark vector V after 
compensating for cropping and scaling. Use the original object I(ij) to compute the 
corresponding reference vector A. 

(C) Synthesize random candidate watermarks with the same spectral properties 
of V. Compute the correlation of each of these candidate vectors with the object J(ij) 
and compare the correlation obtained with V to the correlation obtained with the random 
candidate vectors as in the aforementioned method for dectecting the presence of a 
watermark in a suspect digital object. If the two correlation types are far apart, then it 
is likely the object J(i j) contains the watermark vector V, i.e., contains the watermark 
of the object I(i j) provided by the claimant. 

In this example a digital image was evaluated. The original image object used in 
this illustrative example is shown in the picture of Fig. 5. The original image object has 
256 (m rows) x 384 (n columns) of pixels. The watermarked image is shown in Fig. 6. 
Thestrengthofmewate^^^ 

that there is no perceptual difference that is distinguishable to the human eye. What can 
be distinguished by the human sense organs, e.g., the eye, has been known in the art or 
can be determined without undue experimentation. Fig. 7 shows the correlation spread 
obtainedbyaverifi^^ 
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of » fig ute corresponds ,o the — *hen «-* - - — - * ; 

— - - — h *- when ,: p ; 

regenerated™— ^^ewa^o^^e^— th. 
T 1^ - — ot *e watermark in Its Stance to a— J. 

and PEG compressed with —a. ioss, achieving a compresston rafon of 2, 

to : — *« — —* see Bhasteran Md d 

• ^H^Kluwer Publishers). The cropped, compressed 
IrnageandVideocompressionstandardsM^ 

£ . . • „„Fpio"8 9 shows the correlation 

^dfcrmelmageotFi,*. A tall spike "spc" is clearly seen m the middle 

thU s showing that the watermark is resistant to scaling. ™hcr, ** >» show the 

L of each eighth pixel „ the — <-» •«* «■ * > *~ * 
ofF,. ,0. Again, a dear spike is seen in the correlation spread. Thus, 
evaultionon truncation shows that the watermark is resistant to truncation. 
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The technique of watermarking a digital object and evaluating a suspect dMtal 
object for the present of the watermark according to the present invention c J be 
implemented with digita. e.ectronics that are capable of data manipulation and 
calculation based on the equations described herein above. Such applicable dirital 
electronics include microprocessors and computers, e.g., personal computers 
minicomputers, and mainframe computers. Furthermore, the algorithms for the data 
manipulation and calculation can be stored in digital storage devices, such as compact 
discs, floppy discs, hard discs, magnetic tapes, a „d the like, which can then be loaded or 
readintothemicroprocessors or computers for implementation offtewatennarking and 
^^^i^ t ^i^ tima ^ 
havmg a suitable digita. storage medium readable by the microprocessors or computers 
It is also contemplated mat various computers can be networked so that digital objects 
can be transferred between computers to be watermarked and evaluated forwatermarks 
I. is also to be understood that the various steps in the watermarking process described 
above can be done separately by different computers and processors and the results be 
combined to achieve theoverall Action ofwatermarking or evaluation for thepresence 
of watermark, as well as both. 

Although the preferred embodiment of the present invention has been described 
and illustrated in detail, it is to be understood that a person skilled in the art can make 
modifications within the scope of the invention. 
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^ 13 CLMMED A lo, for « - — - — 



1. 



comprising: ^ frrtm c OU rce data on the digital 

(a) encrypting a message derived from source 

object to obtain an encrypted message digest (S); and 

(b) d envin g awatermark fr omtheencryptedmessa g ed lg est(S)and 

incorporating into the source data. 

Am etho d accord i n gt oc 1 a im .wher= i n*=messa Sei sob t ainedv i a 

lest (M) on the *». -** - * — «* " d J 



enc 



Am^odaccordingtodaimlwh^nfl.ewa.ermatkUaphysical 

dom a ta — andthe method further comprises l-P-***-— *. 

watermark to at least a portion of the source data. 

A method according to claim 3 further comprising transforming a 
domain in deriving the watermark. 
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5. A method according to claim 4 further comprising deriving the 
frequency domain vector (U) by modulating.at least a ponion of the encrypted message 
digest (S) to obtain at least a portion of the vector (U). 

6. A method according to claim 5 wherein a portion of the vector (U) 
corresponds to low frequencies and another portion of (U) corresponds to high 
frequencies, the portion of U corresponding to low frequencies being derived by 
modulating at least a portion of the encrypted message digest (S). 

7. Amemodaccor dingtoclaim6whereintheportionofthevector(U) 
corresponding to low frequencies are modulated to have more significant impact on 
amplitude of the watermark than the portion of the vector (U) corresponding to high 
frequencies. 

8- Amethodaccord ingtoclaim7vvhereinthe P ortionofthevector(U) 

corresponding to low frequency has negative value in elements corresponding to "0" bits 
of the at least a portion of the encrypted message digest (S) and has positive value in 
elements corresponding to »1« bits of the at least a portion of the encrypted message 
digest (S); and wherein the portion of (U) corresponding to high frequencies have 
elements of zero value. 



9. A method according to claim 1 wherein the source data consist of 

rows and cbiumns of pixels and the watermark is represented by a watermark vector (W) 
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^dimension . 
(n) of the pixels. 

Am e t hodaccordi„ S .oc 1 a iro 9 W he reta ap i xe 1 con 0taS aa t ao„a 
discrete section of an image object 

. .i,; m o wherein a pixel contains data on a 
u Amethodaccordingtoclaun9wneretnap 

discrete section of audio object. 

Am et h odaccordin g tociaim9where i „*ewa.err M rUncorporated 

^^^^^^^^ 

A method according to claim 9 further comprising deriving from 
„ L.asourcedatavectorC^havingunesamedimensionasthatof^ 

— * "** W ^ ' vector (W) based onthe encrypted message digest 

^suchmatv-atermarkvectorCW) ■ ^^^rtoorf 

eompris.gcombinmgdte.aterma^ ' ^ ^ed to form watermark data. 
ftesourcedatafromwhichsourcedatavectorCWtsdenv 

Amefnodaccording.oc.aim 9 former comprising comparing the 

*,* before incorporation of the watermark to after 
a least a portion of the source data before ip 

incorporation of the watermark. 
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15. A method according to claim 14 further comprising findin* the 

corre.ationbetween the watermark vector (W) and a target vector (X) derived fromdata 
suspected of containing the watermark, wherein said target vector (X) is orthogonal to 
the source data to which the watermark is incorporated. 

16. Amethodforid entiryingdatausingdigit a lwatermark,comprising: 

(a) performing a one-way function on source data to obtain", 
message digest (M); 

(b) encrypting the message digest (M) with a signature encryption 
key to obtain an encrypted message digest (S); 

(c) deriving a frequency domain vector (U) from the encrypted 
message digest (S) by modulating a portion of the encrypted message digest (S) 
corresponding to low frequencies more than a portion corresponding to high 
frequencies; 

(d) transforming the frequency domain vector (U) into a physical 

domain key vector (V); 

(e) selecting a portion of the source data and deriving a 

selected source data; and 

(Ocombiningmeselectedsourcedatawimmewatermarkingvector 
(W) in the physical domain. 
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Wme.nsfor^p.ingam^denvcdfto.n source data with 
a^ureenc.yption^toob.in.nencryp.ed.nessagediges.CS^and 

W means for deriving a — * from the encrypted message 
digest (S) and incorporating into the source data. 

A system according to claim 17 further comprising a means for 
JL a hash function on the source data to obtain a message digest (M) and 

encryption key to obtain the encrypted message digest (S). 

i 17 unrein the water mark is a 
19 A system according to claim 17 wherein tne 

watermark to at least a portion of the source data. 

A system according to claim 19 wherein the means for deriving 

domain vector (U) from the encrypted message digest (S) and 
derives a frequency domain vector [u> 

ro ns f orms«hevector(U).op h ysica,domaininderivi„g«he — 

A system according to claim 20 wherein the means for deriving 

„ m ,in vector (U) by modulating at least a portion of the 
derives the frequency domain vector (U) y 

^ryptedmessagedigest^toobtainatleastaportionofthevectorCU). 
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22. 



A system according to claim 21 wherein the means for deriving 
manages the source data as rows and columns of pixels and derives a watermark vector 
(W) based on the vector (U), the watermark vector (W) having a dimension 
corresponding to the number of rows ( m ) or the number of columns (n) of the pixels. 

23- A system according to claim 22 wherein the means for derivin* 

derives from the source dataasource data vector (A) having the same dimension as that 
of the watermark vector (W) by selecting at least a portion of the source data and 
wherein the watermark vector (W) is orthogonal to source data vector (A). 

24. A system according to claim 23 further comprising a means for 
comparing a set of target data with the source data, the means for comparing compares 
a target vector (X) derived from the target data to the source data, the target vector (X) 
being orthogonal to the source data vector (A). 

25. An article of manufacture comprising a program storage medium 
tangibly embodying a program code means readable by a computer to cause the 
computer to identifying a digital object using a digital watermark, comprising: 

(a) code means for performing a one-way function on source data 
on the digital object to obtain a message digest (M) on the source data; 

(b) code means for encrypting the message digest (M) with a 
signature encryption key to obtain an encrypted message digest (S); 



28 



WO 99/17537 



PCTAJS98/20196 



(c) code means for deriving a watermark from the encrypted 

m essage digest (S) via a transforming a portion of the message digest (S) as 
^cvdon^inintoaphysicaidomainneforeresuUtaginaone-dimens, ona. 

watermark for incorporating into the source data; and 

(a) code means for incorporating me one dimensiona. watermark 

into the source data. 



29 



WO 99/17537 

PCT/US98/20196 



Q 
LU 



h-UJ, 








Q 

QLO • 
>- 

O00LU 
ZLUQ 
LU2Q 



PCT/US98/20196 



« • 



WO 99/17537 



2/10 




ONE " 
WAY 
HASH, 



ENCRYPTION 



s| oiio-- 



FIRST 64 BITS 
U 



111-1 100 — 00000 



512 BITS 
MODULATION 



— v 

n BITS 



FOURIER TRANSFORM 



KEY VECTOR. V 

AVERAGE 

ORTHOGONAUZE V on A 




j-b ROWS 



-- [averaged row vector a] 



nnr nm ,QnKIAI watermark w 



INCORPORATE W 
INTO BROWS OF I 





b ROWS 



b ROWS 



Fig. 3 



WO 99/17537 



3/10 



PCT/US98/20196 




AVERAGED ROW 
VECTOR. A" 



AVERAGE 



ORTHOGONALIZE 
A" on A 



TEST OBJECT VECTOR. X 



CORRELATE 
W AND X 



CORRELATION 
INDICATOR 



Fig. 4 



WO 99/17537 



4/10 



PCT/US98/20196 




WO 99/17537 



PCT/US98/20196 




PCmJS98/20196 

99/17537 

6/10 




WO 99/17537 

7/10 



V » 

PCT/US98/20196 



WO 99/17537 



9/10 



PCT/US98/20196 




WO 99/17537 



10/10 



PCT/US98/20196 




INTERNATIONAL SEARCH REPORT 



Int. llonal Application No 

PCT/US 98/20196 



According to International Patent Clarification (IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 

Minimum ^um^entatlon searched (clarification system followed by classification symbols) 



Documentation searched other than minimum documentation to the extent tha t such documents are Included In the (ie.ds searched 



Electronic data base consulted during the international search (name of data base 



and, where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 0 



Citation of document, with Indication, where appropriate, of the relevant 



passages 



Relevant to claim No. 



SC.HmpEO_.EI.AL;.. "ROBUST CONTENT BASED 
DIGITAL SIGNATURE FOR IMAGE 
AUTHENTICATION" 

£52__D?;?r S T H l \ THE 1996 IEEE INTERNATIONAL 
CONFERENCE IN IMAGE PROCESSING, 

oSl- 3 « 16 " 19 September 1996, pages 
227-230, XP002090178 
see the whole document 

DELAIGLE J -F ET AL: "DIGITAL 

WATERMARKING" 

PROCEEDINGS OF THE SPIE 

XMMMwfc 1 febrUary " 96 ' PaS " 59 - U0 ' 
see the whole document 

-/-- 



1-3, 
17-19 



4-7,20, 
21 

4-7,20, 
21 



14-16,24 



[~X| Furtne r documents are listed In the continuation of box C. 
• Special categories of cited documents : 

" A " ^i^rJL^i?!^ T° S? n * ral <" the art which is not 
considered to be ot particular relevance 

^ r d * t | urn9n,bu, P ub " sl1e<lono ' , a«8rthe international 

" L " d 2S!2. e , nt _? 1 !f!; ma '" hrow douWs on Priority claimfslor 

citation or other special reason (as specilied) 
"°" d 0 5 ,^™ n ^** rrtn 9 ,oanoral<ll8Cl <>sur« 1 use. exhibition or 

T ' VSl^&T"" " """9^0 but 

Date of the actual completion of the international search 

19 January 1999 



|X | Patent (ftrniJ y members are listed In annex. 

T- later document published after the international filing date 
or pnonty date and not in conflict with the application but 
cited to understand the principle or theory underlying the 
invention 3 

"X" document of particular relevance; the claimed Invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

■V document of particular relevance; the claimed Invention 

d£!£L* SSSS^^S^ 9 an lnventive 8*eP when the 
document is combined with one or more other such docu- 

IrUhe 8 art** combination ** in 9 obvious t0 a Person skilled 
document mem ber of the same patent family 
Date of mailing of the international search report 

28/01/1999 



i Name and mailing address of the ISA 

^RSf" Patent Office, P.B. 5818Patentlaan2 
NL-2280 HV Rijswijk 
Tel. (+31-70) 340-2040. Tx. 31 651 epo nl. 
Fax: (+31-70) 340-3016 



Foim PCT/lSA/210 (s«oond ihott) (July 1092> 



Authorized officer 



Hubeau, R 



page 1 of 2 



IIMTFRNATIONAL SEARCH REPORT ■• Uona , AD0Uca ti 0 n no 

PCT/US 98/20196 


Category * C 


in) DOCUMENTS CONSIDEHCU IU Dcncui-n' 

nation ol document, with indteatloawriefe appropriate, ol the relevant passages 




A 


US 5 499 294 A (FRIEDMAN GARY L) 

12 March 1996 „ 

see column 2, line 18 - column 3, line Zb 


1-3, 
17-19 



Form PCT/ISA/21 0 (continuation ot second sh»et) (July 1992) 

page 2 of 2 



INTERNATIONAL SEARCH REPORT 

Information on patent family members 



Irternntlonal Application No 

PCT/US 98/20196 



Patent document 
cited in search report 



Publication 
date 



US 5499294 



Patent family 
member(s) 



12-03-1996 



Publication 
date 



NONE 



Foim PCT/ISA/210 (patent lamHy annex) (July 1992) 



